MyST Release 6.x.x Open Source Licensing Information Last updated: March 30, 2018

The following table lists in alphabetical order third-party open source libraries used in MyST. These libraries are distributed without modification in binary format only and dynamically linked at run-time; to access the source code please click on the corresponding Opensource Project and navigate to its website from where you can download the source code.

Library Name Version License Description aether-api-1.13.1.jar 1.13.1 Eclipse 1.0 The application programming interface for the repository system. aether-impl-1.13.1.jar 1.13.1 Eclipse 1.0 An implementation of the repository system. aether-spi-1.13.1.jar 1.13.1 Eclipse 1.0 The service provider interface for repository system implementations and repository connectors. aether-transport-wagon-0.9.0.M3.jar 0.9.0.M3 Eclipse 1.0 A transport implementation based on Maven Wagon. aether-util-1.13.1.jar 1.13.1 Eclipse 1.0 A collection of utility classes to ease usage of the repository system. ant-1.8.3.jar 1.8.3 Apache 2.0 master POM ant-1.9.2.jar 1.9.2 Apache 2.0 master POM ant-apache--1.9.0.jar 1.9.0 Apache 2.0 master POM ant-contrib.jar Apache 2.0 ant-jsch-1.9.0.jar 1.9.0 Apache 2.0 contains the sshexec and scp tasks jsch 0.1.29 might not be available from maven ant-launcher-1.9.2.jar 1.9.2 Apache 2.0 master POM antlr-2.7.7.jar 2.7.7 BSD 3 A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing , C#, C++, or Python actions. ant-nodeps-1.8.1.jar 1.8.1 Apache 2.0 contains all the optional tasks and types which do not have particular dependencies aopalliance-1.0.jar 1 Public Domain AOP Alliance artifactory-2.4.3.jar 2.4.3 Apache 2.0 org.jenkins-ci.plugins:artifactory:2.4.3 asm-1.0.2.jar Apache 2.0 asm-3.3.1.jar 3.3.1 BSD 3 A very small and fast Java manipulation framework

CONFIDENTIAL Page 1 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description aspectjrt-1.8.5.jar 1.8.5 Eclipse 1.0 The runtime needed to execute a program using AspectJ aspectjweaver-1.8.5.jar 1.8.5 Eclipse 1.0 The AspectJ weaver introduces advices to java classes avalon-framework-api-4.3.1.jar 4.3.1 Apache 2.0 Avalon Framework API avalon-framework-impl-4.3.1.jar 4.3.1 Apache 2.0 Avalon Framework Implementation aws-java-sdk-core-1.10.9.jar 1.10.9 Apache 2.0 The AWS SDK for Java - Core module holds the classes that is used by the individual service clients to interact with Amazon Web Services. Users need to depend on aws- java-sdk artifact for accessing individual client classes. aws-java-sdk-ec2-1.10.9.jar 1.10.9 Apache 2.0 The AWS Java SDK for Amazon EC2 module holds the client classes that are used for communicating with Amazon EC2 Service backport-util-concurrent-3.1.jar 3.1 Public Domain Dawid Kurzyniec's backport of JSR 166 batik-anim-1.7.jar 1.7 Apache 2.0 batik-awt-util-1.7.jar 1.7 Apache 2.0 batik-bridge-1.7.jar 1.7 Apache 2.0 batik-css-1.7.jar 1.7 Apache 2.0 batik-dom-1.7.jar 1.7 Apache 2.0 batik-ext-1.7.jar 1.7 Apache 2.0 batik-extension-1.7.jar 1.7 Apache 2.0 batik-gvt-1.7.jar 1.7 Apache 2.0 batik-js-1.7.jar 1.7 Mozilla 1.1 This is a patched version of Rhino 1.6R5 for use by Batik. See

http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/lib/ README.js.txt for details of the patch. batik-parser-1.7.jar 1.7 Apache 2.0 batik-script-1.7.jar 1.7 Apache 2.0 batik-svg-dom-1.7.jar 1.7 Apache 2.0 batik-svggen-1.7.jar 1.7 Apache 2.0 batik-transcoder-1.7.jar 1.7 Apache 2.0 batik-util-1.7.jar 1.7 Apache 2.0

CONFIDENTIAL Page 2 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description batik--1.7.jar 1.7 Apache 2.0 bcpkix-jdk15on-1.47.jar 1.47 Bouncy Castle License The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.7. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.

bcprov-jdk15on-147.jar Bouncy Castle License http://www.bouncycastle.org/java.html bridge-method-annotation-1.13.jar 1.13 MIT Evolve your classes without breaking compatibility bsh-2.0b4.jar 2.0b4 LGPL 3.0 BeanShell build-info-api-2.5.3.jar 2.5.3 Apache 2.0 org.jfrog.buildinfo:build-info-api:2.5.3 build-info-client-2.5.3.jar 2.5.3 Apache 2.0 org.jfrog.buildinfo:build-info-client:2.5.3 build-info-extractor-2.5.3.jar 2.5.3 Apache 2.0 org.jfrog.buildinfo:build-info-extractor:2.5.3 build-info-extractor-gradle-3.1.2.jar 3.1.2 Apache 2.0 org.jfrog.buildinfo:build-info-extractor-gradle:3.1.2 build-info-extractor-ivy-2.5.2.jar 2.5.2 Apache 2.0 org.jfrog.buildinfo:build-info-extractor-ivy:2.5.2 build-info-extractor-maven3-2.5.3.jar 2.5.3 Apache 2.0 org.jfrog.buildinfo:build-info-extractor-maven3:2.5.3 build-info-vcs-2.5.3.jar 2.5.3 Apache 2.0 org.jfrog.buildinfo:build-info-vcs:2.5.3 cdi-api-1.0.jar 1 Apache 2.0 APIs for JSR-299: Contexts and Dependency Injection for Java EE classmate-1.0.0.jar 1.0.0 Apache 2.0 Library for introspecting types with full generic information including resolving of field and method types. classworlds-1.1.jar 1.1 BSD-like classworlds-1.1-alpha-2.jar 1.1-alpha-2 BSD-like codegen-0.6.7.jar 0.6.7 Apache 2.0 Code generation and compilation for Java commons-beanutils-1.7.0.jar 1.7.0 Apache 2.0 commons-beanutils-1.9.1.jar 1.9.1 Apache 2.0 commons-chain-1.2.jar 1.2 Apache 2.0 An implementation of the GoF Chain of Responsibility pattern commons-cli-1.2.jar 1.2 Apache 2.0 Commons CLI provides a simple API for presenting, processing and validating a command line interface.

CONFIDENTIAL Page 3 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description commons-codec-1.9.jar 1.9 Apache 2.0 The Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. commons-collections-3.2.1.jar 3.2.1 Apache 2.0 Types that extend and augment the Java Collections Framework. commons-csv-1.1.jar 1.1 Apache 2.0 The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types. commons-digester-1.6.jar 1.6 Apache 2.0 commons-exec-1.2.jar 1.2 Apache 2.0 Apache Commons Exec is a library to reliably execute external processes from within the JVM. commons-httpclient-3.1.jar 3.1 Apache 2.0 The HttpClient component supports the client-side of RFC 1945 (HTTP/1.0) and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily. commons-io-2.4.jar 2.4 Apache 2.0 The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. commons-lang3-3.4.jar 3.4 Apache 2.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. commons-logging-1.0.4.jar 1.0.4 Apache 2.0 Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. commons-logging-1.2.jar 1.2 Apache 2.0 is a thin adapter allowing configurable bridging to other,

CONFIDENTIAL Page 4 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description well known logging systems. commons-net-3.1.jar 3.1 Apache 2.0 Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois commons-validator-1.2.0.jar 1.2.0 Apache 2.0 Commons Validator provides the building blocks for both client side validation and server side data validation. It may be used standalone or with a framework like Struts. credentials-1.15.jar 1.15 MIT org.jenkins-ci.plugins:credentials:1.15 cxf-core-3.1.0.jar 3.1.0 Apache 2.0 Apache CXF Core cxf-rt-frontend-jaxrs-3.1.0.jar 3.1.0 Apache 2.0 Apache CXF Runtime JAX-RS Frontend cxf-rt-rs-client-3.1.1.jar 3.1.1 Apache 2.0 Apache CXF JAX-RS Client cxf-rt-rs-extension-providers-3.1.1.jar 3.1.1 Apache 2.0 Apache CXF JAX-RS Extensions: Providers cxf-rt-rs-security-jose-3.1.1.jar 3.1.1 Apache 2.0 Apache CXF Runtime JOSE cxf-rt-rs-security-oauth2-3.1.1.jar 3.1.1 Apache 2.0 Apache CXF Runtime OAuth 2.0 cxf-rt-security-3.1.1.jar 3.1.1 Apache 2.0 Apache CXF Runtime Security functionality cxf-rt-transports-http-3.1.0.jar 3.1.0 Apache 2.0 Apache CXF Runtime HTTP Transport DbSetup-1.5.0.jar 1.5.0 MIT Helps you setup your database with test data dom4j-1.6.1.jar 1.6.1 Dom4j dom4j: the flexible XML framework for Java doxia-core-1.0-alpha-10.jar 1.0-alpha-10 Apache 2.0 Doxia core classes and interfaces. doxia-decoration-model-1.0-alpha-10.jar 1.0-alpha-10 Apache 2.0 The Decoration Model handles the site descriptor, also known as site.xml. doxia-module-apt-1.0-alpha-10.jar 1.0-alpha-10 Apache 2.0 A Doxia module for Almost Plain Text source documents. doxia-module-fml-1.0-alpha-10.jar 1.0-alpha-10 Apache 2.0 A Doxia module for FML source documents. doxia-module-xdoc-1.0-alpha-10.jar 1.0-alpha-10 Apache 2.0 A Doxia module for Xdoc source documents. doxia-module-xhtml-1.0-alpha-10.jar 1.0-alpha-10 Apache 2.0 A Doxia module for Xhtml source documents. doxia-sink-api-1.0.jar 1 Apache 2.0 Doxia Sink API. doxia-site-renderer-1.0-alpha-10.jar 1.0-alpha-10 Apache 2.0 The Site Renderer handles the rendering of sites.

CONFIDENTIAL Page 5 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description dozer-5.5.1.jar 5.5.1 Apache 2.0 Dozer is a powerful Java Bean to Java Bean mapper that recursively copies data from one object to another ecj-4.3.1.jar 4.3.1 Eclipse 1.0 Eclipse JDT Core Batch Compiler fest-assert-1.4.jar 1.4 Apache 2.0 Flexible' or 'fluent' assertions for testing fest-util-1.1.6.jar 1.1.6 Apache 2.0 Utility methods used by FEST modules findbugs-annotations-1.3.9-1.jar 1.3.9-1 Apache 2.0 A clean room implementation of the Findbugs Annotations based entirely on the specification provided by the javadocs and at http://findbugs.sourceforge.net/manual/annotations.html. fop-1.0.jar 1 Apache 2.0 Apache FOP (Formatting Objects Processor) is the world's first print formatter driven by XSL formatting objects (XSL- FO) and the world's first output independent formatter. It is a Java application that reads a formatting object (FO) tree and renders the resulting pages to a specified output. Output formats currently supported include PDF, PCL, PS, AFP, TIFF, PNG, SVG, XML (area tree representation), Print, AWT and TXT. The primary output target is PDF. freemarker-2.3.22.jar 2.3.22 Apache 2.0 FreeMarker is a "template engine"; a generic tool to generate text output based on templates. ganymed-ssh2-261.jar 261 BSD 3 Ganymed SSH-2: Java based SSH-2 Protocol Implementation groovy-all-1.8.5.jar 1.8.5 Apache 2.0 Groovy: A powerful, dynamic language for the JVM gson-2.6.2.jar 2.6.2 Apache 2.0 Gson JSON library guava-18.0.jar 18 Apache 2.0 Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.

Guava has only one code dependency - javax.annotation, per the JSR-305 spec.

CONFIDENTIAL Page 6 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description guava-retrying-2.0.0.jar 2.0.0 Apache 2.0 This is a small extension to Google's Guava library to allow for the creation of configurable retrying strategies for an arbitrary function call, such as something that talks to a remote service with flaky uptime. guice-no_aop-4.0-beta.jar 4.0-beta Apache 2.0 hamcrest-core-1.3.jar 1.3 BSD 3 This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations. hibernate-commons-annotations- 4.0.5.Final LGPL 2.1 Common reflection code used in support of annotation 4.0.5.Final.jar processing hibernate-core-4.3.10.Final.jar 4.3.10.Final LGPL 2.1 The core O/RM functionality as provided by Hibernate hibernate-entitymanager-4.3.10.Final.jar 4.3.10.Final LGPL 2.1 Hibernate O/RM implementation of the JPA specification hibernate-jpa-2.1-api-1.0.0.Final.jar 1.0.0.Final Eclipse 1.0, Eclipse Distribution Clean-room definition of JPA APIs intended for use in License v. 1.0 developing Hibernate JPA implementation. See README.md for details hibernate-validator-5.1.3.Final 5.1.3.Final Apache 2.0 Hibernate's Bean Validation (JSR-303) reference implementation. httpclient-4.4.jar 4.4 Apache 2.0 Apache HttpComponents Client httpclient-4.5.2.jar 4.5.2 Apache 2.0 Apache HttpComponents Client httpclient-4.5.jar 4.5 Apache 2.0 Apache HttpComponents Client httpcore-4.4.4.jar 4.4.4 Apache 2.0 Apache HttpComponents Core (blocking I/O) icu4j-49.1.jar 49.1 ICU License International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support

CONFIDENTIAL Page 7 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description ivy-2.2.0.jar 2.2.0 Apache 2.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. izpack-api-5.0.0-rc1.jar 5.0.0-rc1 Apache 2.0 IzPack parent module izpack-listener-5.0.0-rc1.jar 5.0.0-rc1 Apache 2.0 IzPack parent module izpack-panel-5.0.0-rc1.jar 5.0.0-rc1 Apache 2.0 IzPack parent module izpack-tools-5.0.0-rc1.jar 5.0.0-rc1 Apache 2.0 Module containing all utilities classes completly independent jackrabbit-jcr-commons-1.5.0.jar 1.5.0 Apache 2.0 General purpose classes for use with the JCR API jackrabbit-webdav-1.5.0.jar 1.5.0 Apache 2.0 WebDAV library used by the Jackrabbit WebDAV support jackrabbit-webdav-2.5.2.jar 2.5.2 Apache 2.0 Generic WebDAV Library jackson-annotations-2.7.3.jar 2.7.3 Apache 2.0 Core annotations used for value types, used by Jackson data binding package. jackson-core-2.5.3.jar 2.5.3 Apache 2.0 Core Jackson abstractions, basic JSON streaming API implementation jackson-core-2.7.3.jar 2.7.3 Apache 2.0 Core Jackson abstractions, basic JSON streaming API implementation jackson-core-asl-1.5.1.jar 1.5.1 Apache 2.0 Jackson is a high-performance JSON processor (parser, generator) jackson-core-asl-1.9.13.jar 1.9.13 Apache 2.0 Jackson is a high-performance JSON processor (parser, generator) jackson-databind-2.5.3.jar 2.5.3 Apache 2.0 General data-binding functionality for Jackson: works on core streaming API jackson-databind-2.7.3.jar 2.7.3 Apache 2.0 General data-binding functionality for Jackson: works on core streaming API jackson-dataformat-csv-2.7.3.jar 2.7.3 Apache 2.0 Support for reading and writing CSV-encoded data via Jackson

CONFIDENTIAL Page 8 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description abstractions. jackson-jaxrs-base-2.5.3.jar 2.5.3 Apache 2.0 Pile of code that is shared by all Jackson-based JAX-RS providers. jackson-jaxrs-json-provider-2.5.3.jar 2.5.3 Apache 2.0 Functionality to handle JSON input/output for JAX-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding. jackson-mapper-asl-1.5.1.jar 1.5.1 Apache 2.0 Data Mapper package is a high-performance data binding package built on Jackson JSON processor jackson-mapper-asl-1.9.13.jar 1.9.13 Apache 2.0 Data Mapper package is a high-performance data binding package built on Jackson JSON processor jackson-module-jaxb-annotations- 2.5.3 Apache 2.0 Support for using JAXB annotations as an alternative to 2.5.3.jar "native" Jackson annotations, for configuring data binding. jandex-1.1.0.Final.jar 1.1.0.Final Apache 2.0 Parent POM for JBoss projects. Provides default project build configuration. JavaEWAH-0.7.9.jar 0.7.9 Apache 2.0 The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.

JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.

The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage- wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.

CONFIDENTIAL Page 9 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description javassist-3.18.1-GA 3.18.1-GA Apache 2.0 Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing in Java. javax.annotation-api-1.2.jar 1.2 CDDL 1.0 Common Annotations for the JavaTM Platform API javax.inject-1.jar 1 Apache 2.0 The javax.inject API javax.ws.rs-api-2.0.1.jar 2.0.1 CDDL 1.1, GPL 2.0 Classpath Java.net - The Source for Java Technology Collaboration

jboss-logging-3.1.3.GA.jar 3.1.3.GA Apache 2.0 The JBoss Logging Framework jboss-logging-annotations- 1.2.0.Beta1 Public Domain Parent POM for JBoss projects. Provides default project 1.2.0.Beta1.jar build configuration. jboss-transaction-api_1.2_spec- 1.0.0.Final CDDL 1.0, GPL 2.0 Classpath The Java Transaction 1.2 API classes 1.0.0.Final.jar jcip-annotations-1.0.jar 1 CC BY 2.5 jcl-over-slf4j-1.5.6.jar 1.5.6 MIT JCL 1.1.1 implementation over SLF4J jcl-over-slf4j-1.7.10 1.7.10 MIT JCL 1.1.1 implemented over SLF4J jcommander-1.48.jar 1.48 Apache 2.0 A Java framework to parse command line options with annotations. jdom-1.1.jar 1.1 JDOM JDOM is, quite simply, a Java representation of an XML document. JDOM provides a way to represent that document for easy and efficient reading, manipulation, and writing. It has a straightforward API, is a lightweight and fast, and is optimized for the Java programmer. It's an alternative to DOM and SAX, although it integrates well with both DOM and SAX. jenkins-war-1.626.war 1.626 MIT org.jenkins-ci.main:jenkins-war:war:1.626 joda-time-2.7 2.7 Apache 2.0 Date and time library to replace JDK date handling jsch-0.1.53.jar 0.1.53 BSD 3 JSch is a pure Java implementation of SSH2 json-path-2.0.0.jar 2.0.0 Apache 2.0 Java port of Stefan Goessner JsonPath.

CONFIDENTIAL Page 10 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description json-smart-2.1.1.jar 2.1.1 Apache 2.0 JSON (JavaScript Object Notation) is a lightweight data- interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript , Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C- family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language. jsoup-1.7.1.jar 1.7.1 MIT jsoup HTML parser jsr250-api-1.0.jar 1 CDDL 1.0 JSR-250 Reference Implementation by Glassfish jsr305-1.3.9.jar 1.3.9 Apache 2.0 JSR305 Annotations for Findbugs jsr305-2.0.0.jar 2.0.0 Apache 2.0 JSR305 Annotations for Findbugs jtidy-4aug2000r7-dev.jar 4aug2000r7-dev JTidy License JTidy is a Java port of HTML Tidy, a HTML syntax checker and pretty printer. Like its non-Java cousin, JTidy can be used as a tool for cleaning up malformed and faulty HTML. In addition, JTidy provides a DOM parser for real-world HTML. jul-to-slf4j-1.7.10.jar 1.7.10 MIT JUL to SLF4J bridge junit-3.8.1.jar 3.8.1 Eclipse 1.0 JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java. junit-4.11.jar 4.11 Common Public 1.0 JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java. jyson-1.0.2.jar Apache 2.0 jython-2.2.1.jar 2.2.1 Jython Software License Jython is an implementation of the high-level, dynamic, object-oriented language Python written in 100% Pure Java, and seamlessly integrated with

CONFIDENTIAL Page 11 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description the Java platform. It thus allows you to run Python on any Java platform. jzlib-1.1.2.jar 1.1.2 BSD 3 JZlib is a re-implementation of zlib in pure Java lib-jenkins-maven-artifact-manager- Apache 2.0 1.2.jar lib-jenkins-maven-embedder-3.11.jar Apache 2.0 liquibase-core-3.4.2.jar 3.4.2 Apache 2.0 log4j-1.2.17 1.2.17 Apache 2.0 Apache Log4j 1.2 log4j-over-slf4j-1.7.10 1.7.10 Apache 2.0 Log4j implemented over SLF4J logback-classic-1.1.3.jar 1.1.3 Eclipse 1.0, LGPL 2.1 logback-classic module logback-core-1.1.3.jar 1.1.3 Eclipse 1.0, LGPL 2.1 logback-core module lucene-analyzers-common-4.0.0.jar 4.0.0 Apache 2.0 Additional Analyzers lucene-core-4.0.0.jar 4.0.0 Apache 2.0 Java Core mailer-1.7.jar 1.7 MIT org.jenkins-ci.plugins:mailer:1.7 maven2.1-interceptor-1.2.jar 1.2 MIT Plexus component descriptor to override key Maven components in 2.1 maven31-agent-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven31-agent:1.6 maven31-interceptor-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven31-interceptor:1.6 maven32-agent-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven32-agent:1.6 maven32-interceptor-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven32-interceptor:1.6 maven3-agent-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven3-agent:1.6 maven3-interceptor-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven3-interceptor:1.6 maven3-interceptor-commons-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven3-interceptor- commons:1.6 maven-aether-provider-3.1.0.jar 3.1.0 Apache 2.0 Extensions to Aether for utilizing Maven POM and repository metadata. maven-agent-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven-agent:1.6

CONFIDENTIAL Page 12 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description maven-artifact-2.2.1.jar 2.2.1 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-artifact-3.1.0.jar 3.1.0 Apache 2.0 Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-artifact-manager-2.2.1.jar 2.2.1 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-compat-3.1.0.jar 3.1.0 Apache 2.0 Maven2 classes maintained as compatibility layer. maven-core-2.2.1.jar 2.2.1 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-core-3.1.0.jar 3.1.0 Apache 2.0 Maven Core classes.

CONFIDENTIAL Page 13 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description maven-deploy-plugin-2.8.2 2.8.2 Apache 2.0 Uploads the project artifacts to the internal remote repository. maven-embedder-3.1.0.jar 3.1.0 Apache 2.0 Maven embeddable component, with CLI and logging support. maven-error-diagnostics-2.2.1.jar 2.2.1 Apache 2.0 Provides a manager component which will process a given Throwable instance through a set of diagnostic sub-components, and return a String message with user-friendly information about the error and possibly how to fix it. maven-filtering-1.0-beta-3.jar 1.0-beta-3 Apache 2.0 A component to assist in filtering of resource files with properties from a Maven project. maven-interceptor-1.6.jar 1.6 MIT org.jenkins-ci.main.maven:maven-interceptor:1.6 maven-model-2.2.1.jar 2.2.1 Apache 2.0 Maven Model maven-model-3.1.1.jar 3.1.1 Apache 2.0 Model for Maven POM (Project Object Model) maven-model-3.3.9.jar 3.3.9 Apache 2.0 Model for Maven POM (Project Object Model) maven-model-builder-3.1.0.jar 3.1.0 Apache 2.0 The effective model builder, with inheritance, profile activation, interpolation, ... maven-monitor-2.0.6.jar 2.0.6 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-monitor-2.2.1.jar 2.2.1 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-plugin-2.9.jar 2.9 MIT org.jenkins-ci.main:maven-plugin:2.9

CONFIDENTIAL Page 14 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description maven-plugin-api-2.2.0.jar 2.2.0 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-plugin-api-3.1.0.jar 3.1.0 Apache 2.0 The API for plugins - Mojos - development. maven-plugin-descriptor-2.2.1.jar 2.2.1 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-plugin-parameter-documenter- 2.2.1 Apache 2.0 Maven is a project development management and 2.2.1.jar comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-plugin-registry-2.2.1.jar 2.2.1 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-profile-2.2.1.jar 2.2.1 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.

CONFIDENTIAL Page 15 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description maven-project-2.2.1.jar 2.2.1 Apache 2.0 This library is used to not only read Maven project object model files, but to assemble inheritence and to retrieve remote models as required. maven-reporting-api-2.0.10.jar 2.0.10 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-reporting-api-3.0.jar 3 Apache 2.0 API to manage report generation. maven-reporting-impl-2.0.4.1.jar 2.0.4.1 Apache 2.0 Maven shared components maven-repository-metadata-2.2.1.jar 2.2.1 Apache 2.0 Per-directory repository metadata. maven-repository-metadata-3.1.0.jar 3.1.0 Apache 2.0 Per-directory local and remote repository metadata. maven-scm-api-1.9.jar 1.9 Apache 2.0 The SCM API provides mechanisms to manage all SCM tools. maven-scm-manager-plexus-1.9.jar 1.9 Apache 2.0 SCM Plexus component. maven-scm-provider-git-commons- 1.9 Apache 2.0 Common library for SCM Git Provider. 1.9.jar maven-scm-provider-gitexe-1.9.jar 1.9 Apache 2.0 Executable implementation for SCM Git Provider. maven-scm-provider-svn-commons- 1.9 Apache 2.0 Common library for SCM SVN Provider. Includes the svn- 1.9.jar settings.xml configuration model. maven-scm-provider-svnexe-1.9.jar 1.9 Apache 2.0 Executable library for SCM SVN Provider. maven-settings-2.2.1.jar 2.2.1 Apache 2.0 Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. maven-settings-3.1.0.jar 3.1.0 Apache 2.0 Maven Settings model. maven-settings-builder-3.1.0.jar 3.1.0 Apache 2.0 The effective settings builder, with inheritance and password decryption.

CONFIDENTIAL Page 16 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description mvel2-2.2.7.Final.jar 2.2.7.Final Apache 2.0 MVEL is a powerful expression language for Java-based applications. It provides a plethora of features and is suited for everything from the smallest property binding and extraction, to full blown scripts. mysema-commons-lang-0.2.4.jar 0.2.4 Apache 2.0 OpenSource projects hosted by Mysema Ltd nekohtml-1.9.6.2.jar 1.9.6.2 Apache 2.0 org.eclipse.jdt.annotation-1.1.0.jar 1.1.0 Eclipse 1.0 org.eclipse.jgit-4.1.1.201511131810- 4.1.1.201511131 Eclipse Distribution License v. 1.0 r.jar 810-r org.eclipse.sisu.inject-0.0.0.M5.jar 0.0.0.M5 Eclipse 1.0 JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring org.eclipse.sisu.plexus-0.0.0.M5.jar 0.0.0.M5 Eclipse 1.0 Plexus-JSR330 adapter; adds Plexus support to the Sisu- Inject container oro-2.0.8.jar 2.0.8 Apache 2.0 p4java-jfrog-2011.1.297684.jar 2011.1.297684 BSD 2 com.perforce:p4java-jfrog:2011.1.297684 picocontainer-2.14.1.jar 2.14.1 BSD 3 A small Java embeddable Dependency Injection container plexus-archiver-1.0-alpha-5.jar 1.0-alpha-5 Apache 2.0 plexus-build-api-0.0.4.jar 0.0.4 Apache 2.0 plexus-cipher-1.7.jar 1.7 Apache 2.0 plexus-classworlds-2.5.1.jar 2.5.1 Apache 2.0 A class loader framework plexus-component-annotations-1.5.5.jar 1.5.5 Apache 2.0 Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations. plexus-container-default-1.0-alpha-9- 1.0-alpha-9- Apache 2.0 stable-1.jar stable-1 plexus-i18n-1.0-beta-7.jar 1.0-beta-7 Apache 2.0 plexus-interactivity-api-1.0-alpha-6.jar 1.0-alpha-6 Apache 2.0 plexus-interpolation-1.16.jar 1.16 Apache 2.0 The Plexus project provides a full software stack for creating and executing software projects. plexus-sec-dispatcher-1.3.jar 1.3 Apache 2.0

CONFIDENTIAL Page 17 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description plexus-utils-1.0.2.jar 1.0.2 Apache 2.0 plexus-utils-1.5.15.jar 1.5.15 Apache 2.0 A collection of various utility classes to ease working with strings, files, command lines, XML and more. plexus-utils-3.0.22.jar 3.0.22 Apache 2.0 A collection of various utility classes to ease working with strings, files, command lines, XML and more. plexus-velocity-1.1.7.jar 1.1.7 Apache 2.0 poi-3.9.jar 3.9 Apache 2.0 Apache POI - Java API To Access Microsoft Format Files poi-ooxml-3.9.jar 3.9 Apache 2.0 Apache POI - Java API To Access Microsoft Format Files poi-ooxml-schemas-3.9.jar 3.9 Apache 2.0 Apache POI - Java API To Access Microsoft Format Files querydsl-apt-3.6.6.jar 3.6.6 Apache 2.0 APT based Source code generation for Querydsl querydsl-codegen-3.6.6.jar 3.6.6 Apache 2.0 codegen module for querydsl querydsl-core-3.6.6.jar 3.6.6 Apache 2.0 core module for querydsl querydsl-jpa-3.6.6.jar 3.6.6 Apache 2.0 JPA support for Querydsl regexp-1.3.jar 1.3 Apache 1.1 rpm-maven-plugin-2.0.1.jar 2.0.1 Apache 2.0 Maven plugin which assembles files into an RPM package for installation on various target UNIX systems. saxon-9.1.0.8.jar 9.1.0.8 Mozilla 1.0 The XSLT and XQuery Processor saxon-dom-9.1.0.8.jar 9.1.0.8 Mozilla 1.0 Saxon support library for third-party object model DOM saxon-xpath-9.jar 9 Mozilla 1.0 net.sf.saxon:saxon-xpath:9 SECURITY-144-compat-1.0.jar 1 MIT org.jenkins-ci:SECURITY-144-compat:1.0 slf4j-api-1.7.12.jar 1.7.12 MIT The slf4j API slf4j-nop-1.5.3.jar 1.5.3 MIT The slf4j NOP binding slf4j-simple-1.7.12.jar 1.7.12 MIT SLF4J Simple binding snakeyaml-1.15.jar 1.15 Apache 2.0 YAML 1.1 parser and emitter for Java spring-aop-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring AOP spring-aspects-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Aspects spring-beans-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Beans spring-boot-1.2.2.RELEASE.jar 1.2.2.RELEASE Apache 2.0 Spring Boot spring-boot-actuator-1.2.2.RELEASE.jar 1.2.2.RELEASE Apache 2.0 Spring Boot Actuator

CONFIDENTIAL Page 18 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description spring-boot-autoconfigure- 1.2.2.RELEASE Apache 2.0 Spring Boot AutoConfigure 1.2.2.RELEASE.jar spring-boot-starter-1.2.2.RELEASE.jar 1.2.2.RELEASE Apache 2.0 Spring Boot Starter spring-boot-starter-actuator- 1.2.2.RELEASE Apache 2.0 Spring Boot Actuator Starter 1.2.2.RELEASE.jar spring-boot-starter-freemarker- 1.2.2.RELEASE Apache 2.0 Spring Boot FreeMarker Starter 1.2.2.RELEASE.jar spring-boot-starter-logging- 1.2.2.RELEASE Apache 2.0 Spring Boot Logger Starter 1.2.2.RELEASE.jar spring-boot-starter-security- 1.2.2.RELEASE Apache 2.0 Spring Boot Security Starter 1.2.2.RELEASE.jar spring-boot-starter-web- 1.2.2.RELEASE Apache 2.0 Spring Boot Web Starter 1.2.2.RELEASE.jar spring-context-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Context spring-context-support- 4.1.6.RELEASE Apache 2.0 Spring Context Support 4.1.6.RELEASE.jar spring-core-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Core spring-data-commons- 1.10.0.RELEASE Apache 2.0 Global parent pom.xml to be used by Spring Data modules 1.10.0.RELEASE.jar spring-data-jpa-1.8.0.RELEASE.jar 1.8.0.RELEASE Apache 2.0 Spring Data module for JPA repositories. spring-expression-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Expression Language (SpEL) spring-jdbc-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring JDBC spring-orm-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Object/Relational Mapping spring-security-config- 3.2.6.RELEASE Apache 2.0 spring-security-config 3.2.6.RELEASE.jar spring-security-core-3.2.6.RELEASE.jar 3.2.6.RELEASE Apache 2.0 spring-security-core spring-security-jwt-1.0.3.RELEASE.jar 1.0.3.RELEASE Apache 2.0 Spring Security JWT is a small utility library for encoding and decoding JSON Web Tokens. It belongs to the family of Spring Security crypto libraries that handle encoding and decoding text as a general, useful thing to be able to do. spring-security-oauth2- 2.0.7.RELEASE Apache 2.0 Module for providing OAuth2 support to Spring Security 2.0.7.RELEASE.jar

CONFIDENTIAL Page 19 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description spring-security-web-3.2.6.RELEASE.jar 3.2.6.RELEASE Apache 2.0 spring-security-web spring-test-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring TestContext Framework spring-tx-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Transaction spring-web-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Web spring-webmvc-4.1.6.RELEASE.jar 4.1.6.RELEASE Apache 2.0 Spring Web MVC stax2-api-3.1.4.jar 3.1.4 BSD 2 tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi- direction validation interface and high-performance Typed Access API. stax-api-1.0.1.jar 1.0.1 Apache 2.0 StAX API is the standard java XML processing API defined by JSR-173 testng-6.9.4.jar 6.9.4 Apache 2.0 TestNG is a testing framework. tomcat-7.0.50.zip 7.0.50 Apache 2.0 Binary distribution of truelicense-core-1.33 1.33 Eclipse 1.0 The core of the TrueLicense Library Collection. truelicense-xml-1.33 1.33 Eclipse 1.0 Provides XML services for encoding/decoding of persistent objects. validation-api-1.1.0.Final.jar 1.1.0.Final Apache 2.0 Bean Validation API velocity-1.5.jar 1.5 Apache 2.0 wagon-file-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Wagon that gets and puts artifacts using file system protocol wagon-ftp-2.4.jar 2.4 Apache 2.0 Wagon that gets and puts artifacts from and to remote server using FTP protocol wagon-http-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Wagon that gets and puts artifacts through http using Apache commons-httpclient wagon-http-2.4.jar 2.4 Apache 2.0 Wagon that gets and puts artifacts through http using Apache httpclient-4.x. wagon-http-lightweight-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Wagon that gets and puts artifacts through http using standard Java library wagon-http-shared-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Shared Library for the wagon-http, and wagon-http- lightweight wagon providers. wagon-http-shared-2.4.jar 2.4 Apache 2.0 Shared Library for the wagon-http, and wagon-http- lightweight wagon providers.

CONFIDENTIAL Page 20 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description wagon-http-shared4-2.4.jar 2.4 Apache 2.0 Shared Library for the wagon-http, and wagon-http- lightweight wagon providers based on httpclient-4.x. wagon-provider-api-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Maven Wagon API that defines the contract between different Wagon implementations wagon-provider-api-2.4.jar 2.4 Apache 2.0 Maven Wagon API that defines the contract between different Wagon implementations wagon-ssh-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Tools to manage artifacts and deployment wagon-ssh-2.4.jar 2.4 Apache 2.0 Tools to manage artifacts and deployment wagon-ssh-common-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Tools to manage artifacts and deployment wagon-ssh-common-2.4.jar 2.4 Apache 2.0 Tools to manage artifacts and deployment wagon-ssh-external-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Wagon that gets and puts artifacts using SSH protocol with a preinstalled SSH client wagon-ssh-external-2.4.jar 2.4 Apache 2.0 Wagon that gets and puts artifacts using SSH protocol with a preinstalled SSH client wagon-webdav-jackrabbit-1.0-beta-6.jar 1.0-beta-6 Apache 2.0 Wagon that gets and puts artifacts through webdav protocol wagon-webdav-jackrabbit-2.4.jar 2.4 Apache 2.0 Wagon that gets and puts artifacts through webdav protocol woodstox-core-asl-4.4.1.jar 4.4.1 Apache 2.0 Woodstox is a high-performance XML processor that implements Stax (JSR-173) and SAX2 APIs

CONFIDENTIAL Page 21 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description xercesImpl-2.10.0.jar 2.10.0 Apache 2.0 Xerces2 is the next generation of high performance, fully compliant XML parsers in the family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program.

The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual.

Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page.

Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1.

Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1

CONFIDENTIAL Page 22 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description documents if the DOM level 3 load/save APIs are in use.

xercesMinimal-1.9.6.2.jar 1.9.6.2 Apache 2.0

CONFIDENTIAL Page 23 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description xml-apis-1.4.01.jar 1.4.01 Apache 2.0, Public Domain, W3C xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun. xml-apis-2.0.2.jar 2.0.2 Apache 2.0 xml-apis-ext-1.3.04.jar 1.3.04 Apache 2.0 xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun. xmlbeans-2.4.0.jar 2.4.0 Apache 2.0 XmlBeans main jar xmlbeans-xpath-2.4.0.jar 2.4.0 Apache 2.0 XmlBeans extended XPath and XQuery support

CONFIDENTIAL Page 24 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc

Library Name Version License Description xmlgraphics-commons-1.4.jar 1.4 Apache 2.0 Apache XML Graphics Commons is a library that consists of several reusable components used by and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. xmlschema-core-2.2.1 2.2.1 Apache 2.0 Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. xmlunit-1.5.jar 1.5 BSD 3 XMLUnit compares a control XML document to a test document or the result of a transformation, validates documents, and compares the results of XPath expressions. zt-exec-1.8.jar 1.8 Apache 2.0 A lightweight library to execute external processes from Java. zt-zip-1.8.jar 1.8 Apache 2.0 The project is intended to have a small, easy and fast library to process ZIP archives. Either create, modify or explode them. On disk or in memory.

CONFIDENTIAL Page 25 of 25 30-Mar-18

MyST Open Source Licensing Information v30032018.doc